Many employers implement workplace policies believing they are standard business practices.

However, some common HR and payroll practices may conflict with Malaysia’s Employment Act 1955, Industrial Relations Act 1967, EPF Act 1991, Personal Data Protection Act (PDPA), and other employment regulations.

In some cases, employers unknowingly expose themselves to:

• Labour complaints
• Payroll disputes
• Employee grievances
• Legal claims
• Fines and penalties

This guide highlights 10 common workplace practices that may create compliance risks for Malaysian employers and HR teams.

1. “Unused Annual Leave Automatically Expires at Year-End”

What Many Employers Do

Some companies implement a strict “use it or lose it” annual leave policy.

Employees who do not utilise their leave before 31 December lose their entitlement completely.

Compliance Risk

Under Section 60E of the Employment Act 1955, annual leave is a statutory entitlement.

Where leave cannot be taken due to business requirements or employer restrictions, employers may be required to compensate employees instead of automatically forfeiting the leave.

HR Best Practice

✔ Clearly define leave carry-forward policies

✔ Maintain proper leave records

✔ Ensure policies do not reduce statutory entitlements

2. “You Were Late Three Times, So We Deduct RM150 From Your Salary”

Compliance Risk

Salary deductions are heavily regulated under Section 24 of the Employment Act 1955.

Employers cannot simply impose arbitrary monetary penalties for lateness.

Permitted deductions are limited to specific categories such as:

• EPF
• SOCSO
• PCB
• Absence from work
• Recovery of overpayments

Improper deductions may trigger wage disputes.

3. Deducting Uniform, Laptop or Equipment Costs From Employee Salaries

Many employers provide:

• Uniforms
• Laptops
• Mobile devices
• Work tools

and later recover costs through payroll deductions.

Without proper legal basis and employee consent, such deductions may not be permissible.

Employers should also ensure deductions do not reduce wages below the statutory minimum wage.

4. Accessing an Employee’s Personal Phone Without Consent

A common misconception is:

“If we suspect misconduct, we can check everything.”

Not necessarily.

Under Malaysia’s Personal Data Protection Act (PDPA), employers should exercise caution when accessing:

• Personal phones
• Private emails
• Messaging applications
• Social media accounts

Investigations should follow proper disciplinary procedures rather than relying on unrestricted access to private information.

5. Rejecting Sick Leave Because It Is Related to Mental Health

Mental health conditions are increasingly recognised by medical practitioners.

Where a registered doctor certifies an employee as medically unfit for work, employers should not automatically reject the medical certificate solely because the condition relates to mental health.

Examples include:

• Anxiety disorders
• Depression
• Stress-related conditions

The same principles generally apply as with physical illnesses.

6. Forcing Employees to Accept New Employment Contracts

Business restructuring happens.

However, employers cannot simply impose materially different employment terms without proper agreement.

Examples include:

• Salary reductions
• Benefit removals
• Significant role changes

Changes should be discussed transparently and documented properly.

7. Unreasonable Training Bonds

Training bonds are not automatically unlawful.

However, disputes often arise when:

• Bond periods are excessive
• Costs are unreasonable
• Employees were not informed beforehand

Training bonds should be proportionate to actual training investments.

8. Closing Sexual Harassment Complaints Without Proper Investigation

Since the Employment Act amendments, employers are expected to take sexual harassment complaints seriously.

A proper inquiry process should include:

• Fair investigation
• Documentation
• Neutral assessment
• Communication of outcomes

Ignoring complaints or conducting superficial investigations may create significant legal and reputational risks.

9. Calling Someone a Freelancer to Avoid EPF and SOCSO

One of the most common compliance mistakes.

Some businesses classify workers as:

• Freelancers
• Independent contractors
• Consultants

However, employment status depends on the actual working relationship rather than the title used in the agreement.

If the worker functions like an employee, statutory obligations may still apply.

10. Threatening Employees for Reporting to Labour Authorities

Employees have the right to seek assistance from relevant government authorities.

Retaliation, intimidation, or threats related to legitimate complaints may create additional legal exposure for employers.

Key Takeaways for Employers

Many employment disputes do not arise from deliberate misconduct.

They arise because employers:

❌ Follow outdated practices

❌ Copy policies from other companies

❌ Depend on verbal instructions

❌ Lack proper HR compliance knowledge

Regularly reviewing HR policies helps reduce:

• Payroll disputes
• Labour complaints
• Compliance penalties
• Employee relations issues

How Pandahrms Helps Employers Stay Compliant

Managing employment compliance manually can be challenging as Malaysian labour regulations continue to evolve.

Pandahrms helps employers streamline:

✔ Leave management

✔ Payroll processing

✔ EPF, SOCSO & PCB calculations

✔ Employee record management

✔ Attendance tracking

✔ HR documentation

✔ Audit-ready reporting

By digitising HR processes, employers can reduce compliance risks and maintain more accurate employee records.